Skip to content

Instantly share code, notes, and snippets.

@LukeZGD
Last active July 11, 2025 18:02
Show Gist options
  • Save LukeZGD/9d781f1b03a69fa46869384a9407a41a to your computer and use it in GitHub Desktop.
Save LukeZGD/9d781f1b03a69fa46869384a9407a41a to your computer and use it in GitHub Desktop.
Downgrade and dualboot status of almost all iOS devices

Downgrade and dualboot status of almost all iOS devices

UPDATED: 2025-07-01

A12 devices and newer

  • You cannot restore to any iOS versions other than signed ones. All SHSH blobs are currently useless.

A10(X) iPads

  • Devices that fall under here have iPadOS 17.x as the latest version. (18.x for iPad 7)
  • Use turdus medula for downgrades to any version (see guides above): https://sep.lol/

A11 devices

  • Devices that fall under here are the iPhone 8 and X.
  • See the SEP/BB Compatibility Chart. iOS 16 SEP/baseband is incompatible with iOS 15 and below.
  • These devices can be restored to iOS 16.6.x with SHSH blobs, you may use Legacy iOS Kit for this which utilizes the updated futurerestore nightly.
  • For downgrades to iOS 14.3-15 with blobs for iPhone 8 and X devices (For advanced users only), See "Guide for downgrading iOS 16+ checkm8 devices to iOS 14-15" linked here: https://gist.github.com/pixdoet/2b58cce317a3bc7158dfe10c53e3dd32
    • On the futurerestore part in Part 3, use Legacy iOS Kit to restore to iOS 14.3-15 with blobs. Then continue with the guide for activation

A9(X) and A10(X) devices, also iPad Air 2 and mini 4

  • Devices that fall under here have iOS 15.x as the latest version. (16.x for older A9(X) iPads)
  • These devices can be restored to iOS 14.x/15.x with SHSH blobs. A9(X) iPads can also be restored to iOS 16.6.x with SHSH blobs. you may use Legacy iOS Kit for this which utilizes the updated futurerestore nightly.
  • A9(X) and A10(X) devices only: It may be better to instead use turdus medula for downgrades to any version (see guides above): https://sep.lol/

A7 and A8 devices except iPad Air 2 and mini 4

  • Devices that fall under here have iOS 12.5.7 as the latest version.
  • You can downgrade to as low as 11.3 with futurerestore if you have SHSH blobs
  • turdus medula may add support for A8(X) devices in a future update

A7 devices (iPhone 5S, iPad Air 1, iPad mini 2)

  • A7 devices (except iPad4,6 and all iPad mini 3 models) can downgrade to 10.3.3 without existing blobs, using Legacy iOS Kit or LeetDown
    • Unfortunately checkm8 is unreliable on Linux, so using macOS may be the better option with gaster having better success rates there
    • iPwnder Lite for iOS can also be used to put device in pwned DFU, if you have another jailbroken iOS device
  • You can also downgrade to 10.2-10.3.2 if you have SHSH blobs
    • You can go as low as 10.1.x but Touch ID will not work for 5S
    • You can downgrade with SHSH blobs using Legacy iOS Kit

A5(X) and A6(X) devices

  • Devices that fall under here have the iOS 9.3.5, 9.3.6, 10.3.3, or 10.3.4 as their latest version.
  • You can downgrade and jailbreak any of these devices (except for iPhone 5C) to iOS 8.4.1 using Legacy iOS Kit without existing blobs
    • For iPhone 4S and iPad 2 (except iPad2,4) devices, iOS 6.1.3 is also an option
  • You can downgrade to any iOS version that you have SHSH blobs for using Legacy iOS Kit
  • You can also save on-board SHSH blobs with Legacy iOS Kit's "Save Onboard Blobs" option
  • If you have iOS 7 SHSH blobs, you can do untethered downgrades using Legacy iOS Kit (powdersn0w)
  • You can also dualboot to any version except 4.3.x using Coolbooter
    • It is recommended to downgrade Coolbooter to 1.5 to 1.4.1
    • For devices jailbroken on iOS 10, downgrade Coolbooter first then install "Coolbooter Fix for Socket" from my repo: https://lukezgd.github.io/repo
  • iPad 2 only: You can dualboot to iOS 4.3.x using FourThree-iPad2 or 4tify-iPad2
    • 4tify-iPad2 is for macOS only
  • You can downgrade tethered without blobs using Legacy iOS Kit, n1ghtshade, or Deca5
    • Both n1ghtshade and Deca5 are for macOS only
    • Usage of Legacy iOS Kit is recommended since both n1ghtshade and Deca5 have jailbreak issues

iPhone 4

  • You can downgrade to iOS 6, 5, or 4 untethered using Legacy iOS Kit (powdersn0w)
    • Only iPhone3,1 (GSM) and iPhone3,3 (CDMA) are supported for untethered downgrades
  • You can also use Legacy iOS Kit to downgrade with saved SHSH blobs (see above)
  • You can also use Legacy iOS Kit to do tethered downgrades
    • Downgrading tethered by going to: Restore/Downgrade -> Other (Tethered)
    • Do a tethered boot by going to: Other Utilities -> Just Boot
    • Tethered downgrade IPSWs option is also available in Legacy iOS Kit, see below notes
  • You can dualboot to any version except 4.x using Coolbooter
  • You can dualboot to 4.x using 4tify (macOS only)

iPod touch 4th gen

iPhone 3GS, iPad 1, iPod touch 2nd and 3rd gen

  • You can also use Legacy iOS Kit to do untethered downgrades to other iOS versions without blobs (or with blobs also)
  • iOS 4.1 is signed for the 3GS, touch 2nd gen and 3rd gen, use iTunes or Legacy iOS Kit to downgrade
    • Error 1015 will show up at the end of restore for iTunes. You can exit recovery mode using RecoveryModeTool
  • Tethered downgrade option is also available in Legacy iOS Kit, see above notes
    • For the iPod touch 3rd gen, see tethered custom IPSWs in pr3lude
  • For iPod touch 2nd gen (old bootrom model), there is no firmware signing for versions 3.0 and lower can be restored freely. 3.x IPSWs are available here: https://invoxiplaygames.uk/ipsw/ and https://archives.legacyjailbreak.com

iPhone 2G, 3G, and iPod touch 1st gen

@AgarNoobDoesGithub
Copy link

Whats the Untethered exploit for the ipod touch 3rd gen?

@LukeZGD
Copy link
Author

LukeZGD commented Aug 26, 2023

Whats the Untethered exploit for the ipod touch 3rd gen?

here's a writeup: https://nyansatan.github.io/exploiting-ios-5-iboot/

dora has released an exploit ramdisk, but currently no tools utilize it: https://github.com/kok3shidoll/untitled/tree/main/exploit/iBoot-1219.62.15/iPod3%2C1

@OctoNezd
Copy link

OctoNezd commented Oct 3, 2023

How come is it possible to downgrade 5S and other A7 devices to 10.3.3, and to not 11 or 12.1-6?

@RemoPro
Copy link

RemoPro commented Oct 5, 2023

As far as I know it’s because the 10.3.3 OTA-update is still signed for when you are still on iOS 9 or so. And this cool tool from LukeZGD could somehow use this signature to sign the whole iOS for the downgrade.

@B1ue-Dev
Copy link

I have an iPhone 6S running iOS 12.2. Is it possible to upgrade to just iOS 12.5x with any of the method mentioned in the A9 chip instruction? Data loss doesn't matter though.

@LukasMFR
Copy link

Whats the Untethered exploit for the ipod touch 3rd gen?

here's a writeup: https://nyansatan.github.io/exploiting-ios-5-iboot/

dora has released an exploit ramdisk, but currently no tools utilize it: https://github.com/kok3shidoll/untitled/tree/main/exploit/iBoot-1219.62.15/iPod3%2C1

Hi, do you know if a tool uses it now ?

@LukeZGD
Copy link
Author

LukeZGD commented Mar 22, 2024

Hi, do you know if a tool uses it now ?

Yes, Legacy iOS Kit

@mrgarbagegamer
Copy link

Is it not possible to dualboot iOS 4 as a secondary OS on an iPod Touch 4G using CoolBooterCLI? Saw a few resources that mentioned that it is

@LukeZGD
Copy link
Author

LukeZGD commented Apr 24, 2024

Is it not possible to dualboot iOS 4 as a secondary OS on an iPod Touch 4G using CoolBooterCLI? Saw a few resources that mentioned that it is

coolbooter does not support ios 4

@mrgarbagegamer
Copy link

coolbooter does not support ios 4

sorry, I meant ios 5, coolbootercli seems to support it (https://www.theiphonewiki.com/wiki/CoolBooter#CoolBooterCLI)

@mrgarbagegamer
Copy link

Semaphorin just got a new update yesterday that adds A10 support and it does support A7

@bradycodemaster
Copy link

not all 32 bit devices support powdersnow and definley not on all ios 7 verisons

@bradycodemaster
Copy link

should be
Restoring with powdersn0w is supported on the following devices and target version range:
iPhone 4 GSM - iOS 4.0 to 7.1.1 (all versions except 4.2.1)
iPhone 4 CDMA - iOS 5.0 to 7.1.1
iPhone 4S, 5, 5C, iPad 2 Rev A, iPod touch 5 - iOS 5.0 to 9.3.5
iPad 1 - iOS 4.3 to 5.1
iPod touch 3 - iOS 4.0 to 5.1
Using powdersn0w requires iOS 7.1.x blobs for your device
No blob requirement for iPhone 4, iPad 1, iPod touch 3 (7.1.2 and 5.1.1 are signed)
For iPhone 5 and 5C, both 7.0.x and 7.1.x blobs can be used

@bradycodemaster
Copy link

Semaphorin just got a new update yesterday that adds A10 support and it does support A7

should also note that sep will not work

@mrgarbagegamer
Copy link

Asked the creator of Semaphorin about dualbooting with the tool:

dualbooting to ios 10.3-10.3.3 on any ios 10.3 or later device=ok
dualbooting to ios 11.0 or later on any ios 13 or later device=explodes the main os
dualbooting to ios 7,8, or 9 on any a7 device running ios 10.3.3 with the help of --dualboot-hfs = ok
dualbooting to ios 8 or 9 on any a8 device running ios 10.3.3 with the help of --dualboot-hfs = ok
dualbooting to ios 9 on any a9 device running ios 10.3.3 with the help of --dualboot-hfs = baseband dead on ios 10 after hfs conversion, but ios 9 baseband works
dualbooting to ios 9 on any a9 device running ios 9.x with the help of --dualboot-hfs = ok

@bradycodemaster
Copy link

@iMattheush
Copy link

Is it possible to untethered downgrade iPad 1 without blobs to 3.2.x and iPhone 4 CDMA to iOS 4.x?

@Its-Yayo
Copy link

So right now it is not kinda possible to downgrade iPhone SE 2 with iOS 17.5.1 to any below iOS 17 versions?
And I also have an iPhone 7 plus with iOS 15.8.2 which I also want to downgrade as well

@misterluigi81
Copy link

is a way to downgrade 6s to ios 11/10/9? i can use a hackintosh if this way only with mac

@Missingphy
Copy link

m4 ipad when

@yoyo2306
Copy link

Hi Luke! I have created a dual system using Coolbooter. How do I mount the secondary system?

@braydendcooper
Copy link

Hi Luke! Can I downgrade my iPhone 4S on iOS 7.0.4 using powdersn0w.

@iMattheush
Copy link

How to hacktivate iPhone 4 without SIM? I don't have the option in settings.

@mrkilltop
Copy link

mrkilltop commented Feb 27, 2025

Can I tethered downgrade iPad Pro 10.5 (A10X)? After booted up to pongoos kernel isn’t loading, iPad will show kernel panic then reboot to system. Why?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment